Mastercard, Flybits and Rogers Bank completed Canada's first AI agent purchase, and banks are building checks to make sure the agent really speaks for you.
An AI agent has bought something in Canada on a shopper's behalf, and the main question now is trust. This fall, Mastercard, AI company Flybits and credit card issuer Rogers Bank completed the first Canadian purchase made through Mastercard's Agent Pay service. Mastercard predicts that by 2030, more than 1 in 10 online shoppers will use AI agents to shop and pay.
Until now, most AI tools have recommended products. Agents go a step further and make the purchase. An agent is software that acts for you. Mastercard's Amisha Parikh described the setup as "human-led, but agent-executed." You decide what to buy and how much to spend. The agent carries it out.
Her example was concert tickets. You could set two seats, a Toronto show, the dates you are free, preferred sections and a $500 budget. The agent can look for tickets that fit. It should not decide that a pricier show in another city is close enough.
Three parties have to be confident. You must trust the agent to follow your instructions. The seller must know the agent is truly acting for you. The bank must confirm the purchase matches what you approved. In the Canadian test, the participants verified three things:
"I think the real learning here was that it works," Parikh said.
Even an approved agent can be targeted. Someone could try to redirect it by feeding it different instructions, an attack called prompt injection. A fake merchant could also look like the perfect match for what the agent was told to find, and lure it into a scam.
Merchants may soon use agents of their own, so software could sit on both sides of a sale. Banks will also need fraud tools that can tell a legitimate shopping agent from a malicious bot. Mastercard's Agent Pay Trust Framework aims to help by checking who an agent represents, what it may do, and whether the merchant can be trusted.
Anyone who lets an AI buy for them should set clear limits up front, such as a budget, dates and exact items. Those limits are the guardrails that banks check the purchase against. Businesses selling online should expect more agent traffic and more checks on it.
The story does not say when everyday shoppers in Canada will be able to use Agent Pay, or which stores will accept it. It also does not spell out what happens if an agent makes a mistake. Parikh said progress will take cooperation among banks, retailers, government, researchers and payment networks.
If an AI shops for you, set a firm budget and clear instructions first, because banks will check each purchase against what you approved.
Mastercard describes AI tools that could buy things for you, and says trust is the hard part: who gets to spend your money, and under what rules.
Read more: Mastercard outlines how AI assistants could shop and pay for youWorld models, AI that learns physics from video, are being built into home robots and driverless cars, and your own videos may help train them.
Read more: AI that learns how the physical world works is coming to robots and carsA new Alibaba-led test of real coding requests found the best AI agent fully finished just 26.4 percent of tasks, so human review still matters.
Read more: AI coding helpers fully finish only about 1 in 4 real tasks
